Governance Professional

Audit and Governance Specialist

Our company is seeking a skilled Audit and Governance Specialist to join our team. In this role, you will be responsible for assisting the Compliance Team Lead in implementing and managing governance, compliance, and audit initiatives.

You will maintain the contextualized Whole of Government (WOG) ICT framework, policies, and standards for the division, which requires an appreciation of domains and ICT processes and risks.

Assess impact of changes in policies and standards with product teams, establish appropriate and effective controls if required, and ensure prompt communications to stakeholders.

Serve as Subject Matter Expert to provide consultancy to product delivery teams and enable them to adopt and comply with the various ICT governance, policies and standards.

Facilitate audits conducted by auditors from Auditor General's Office, WOG ICT Governance Group, Internal Auditor Dept, etc, during audit fieldwork and to manage auditors to ensure findings are accurate and reasonable.

Manage consultants and independent auditors, and participate, in the conduct of health checks and reviews to assess status of adoption of and compliance with policies and standards, to identify non-compliance gaps, to recommend remediation follow-ups, to validate remediated actions and to close the findings.

Conduct pre-audit compliance health checks on large-scale, complex system high/medium risk areas to establish the status of adoption of and compliance with policies and standards, for regular reporting to stakeholders.

Track all health checks and audit findings to ensure timely completion, validation and closure for regular reporting to stakeholders.

Manage and track the status of adoption of and compliance with policies and standards for regular reporting to stakeholders.

Coordinate with Product Management Office (PMO) as well as product teams on responses to compliance-related polls for submission to respective parties; and

Provide secretariat support for WOG ICT Programme Forum.

Key Responsibilities include:

• Maintain the contextualized Whole of Government (WOG) ICT framework, policies, and standards for the division which requires an appreciation of domains and ICT processes and risks.
• Assess impact of changes in policies and standards with product teams, establish appropriate and effective controls if required, and ensure prompt communications to stakeholders.
• Serve as Subject Matter Expert to provide consultancy to product delivery teams and enable them to adopt and comply with the various ICT governance, policies and standards.
• Facilitate audits conducted by auditors from Auditor General's Office, WOG ICT Governance Group, Internal Auditor Dept, etc, during audit fieldwork and to manage auditors to ensure findings are accurate and reasonable.
• Manage consultants and independent auditors, and participate, in the conduct of health checks and reviews to assess status of adoption of and compliance with policies and standards, to identify non-compliance gaps, to recommend remediation follow-ups, to validate remediated actions and to close the findings.
• Conduct pre-audit compliance health checks on large-scale, complex system high/medium risk areas to establish the status of adoption of and compliance with policies and standards, for regular reporting to stakeholders.
• Track all health checks and audit findings to ensure timely completion, validation and closure for regular reporting to stakeholders.
• Manage and track the status of adoption of and compliance with policies and standards for regular reporting to stakeholders.
• Coordinate with Product Management Office (PMO) as well as product teams on responses to compliance-related polls for submission to respective parties; and
• Provide secretariat support for WOG ICT Programme Forum.

At least 6 years of proven experience in IT auditing, governance, and risk management, with a solid understanding of IT frameworks.

In-depth knowledge of information security principles, risk assessment, and compliance standards.

Experience with audit frameworks such as COBIT, NIST, ISO 27001, and ITIL.

Proficiency in assessing ICT policies, including IM8 or equivalent.

Strong analytical and critical thinking skills with the ability to provide strategic recommendations.

Excellent interpersonal, communication, and stakeholder management skills.

Recognized professional qualifications such as CISSP, CISA, CISM, or equivalent certifications.

Remuneration package aligning with your qualifications and experience.

Click